shellcheck_run_steps: Use melange docker image

The `melange` command is not otherwise available in CI.

Signed-off-by: dann frazier <dann.frazier@chainguard.dev>

Author: dannf

pre_commit_hooks/shellcheck_run_steps.py

@@ -16,6 +16,7 @@
 # Please provide the output of `grype koalaman/shellcheck@sha256:<newhash>`
 # in your PR when bumping. Referenced by SHA for safety.
 DefaultShellCheckImage = "koalaman/shellcheck@sha256:652a5a714dc2f5f97e36f565d4f7d2322fea376734f3ec1b04ed54ce2a0b124f"
+MelangeImage = "cgr.dev/chainguard/melange:latest"
 
 
 # Returns False if shellcheck reports issues
@@ -110,11 +111,14 @@ def main(argv: Sequence[str] | None = None) -> int:
         ) as compiled_out:
             subprocess.check_call(
                 [
-                    "melange",
+                    "docker",
+                    "run",
+                    f"--volume={os.getcwd()}:/work",
+                    "--rm",
+                    MelangeImage,
                     "compile",
-                    "--arch=x86_64",
+                    f"--arch={os.uname().machine}",
                     "--pipeline-dir=./pipelines",
-                    filename,
                 ],
                 stdout=compiled_out,
             )